StackRadar

CVE-2026-16599

Medium

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.1
base score, highest
EPSS
0.004
31st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
565
of 17,787 indexed, latest versions
Container images
560
deployed by those charts
Fix available
2 of 3
affected packages

Security update for wget

Carried by container images the latest versions of 565 of 17,787 indexed charts deploy, on 560 images.

Affected packageAffected versionsFixed inImages
wgetdeb1.15-1ubuntu1, 1.15-1ubuntu1.14.04.1, 1.15-1ubuntu1.14.04.4, 1.17.1-1ubuntu1.3+23 moreno fix listed555
wgetapk1.25.0-r4, 1.25.0-r161.25.0-r174
wgetrpm1.24.5-150700.3.6.11.24.5-150700.3.12.11
OSV records
CGA-7q69-m5x5-gcq7DEBIAN-CVE-2026-16599UBUNTU-CVE-2026-16599SUSE-SU-2026:4049-1
Also known as
CGA-j4gw-5vrq-m7mf

Charts affected

565 by stars
ChartLatestAffected imagesRadar Score
cloudshellinseefrlab4.3.01 of 2See more

cloudshell inseefrlab 4.3.0

1 of the 2 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
inseefrlab/shelly:cloudshell31f04ca7436b
wget@1.21.2-2ubuntu1
no fix listed

Open the chart page →

10,542
itm-servicesintelVerified publisher2.0.01 of 8See more

itm-services intel 2.0.0

1 of the 8 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
wget@1.20.3-1ubuntu2
no fix listed

Open the chart page →

18,137
intelowlintelowl-helm6.6.1-01-06-20261 of 5See more

intelowl intelowl-helm 6.6.1-01-06-2026

1 of the 5 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
intelowlproject/intelowl:v6.6.10b22e547ea6b
wget@1.21.3-1+b2
no fix listed

Open the chart page →

16,558
inventreeinventreeOfficialVerified publisher0.4.281 of 2See more

inventree inventree 0.4.28

1 of the 2 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
inventree/inventree:1.5.4a946ec09da3e
wget@1.25.0-2
no fix listed

Open the chart page →

5,757
dynamic-ip-loadbalancer-controlleritsmethemojoVerified publisher0.1.01 of 1See more

dynamic-ip-loadbalancer-controller itsmethemojo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
library/buildpack-deps:curl04907bdd423b
wget@1.25.0-2
no fix listed

Open the chart page →

1,692
tekton-git-listeneritsmethemojoVerified publisher0.1.11 of 1See more

tekton-git-listener itsmethemojo 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
library/buildpack-deps:scmac978b783657
wget@1.25.0-2
no fix listed

Open the chart page →

2,178
opencloudjacobcolvinVerified publisher0.2.31 of 13See more

opencloud jacobcolvin 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
wget@1.21.4-1ubuntu4
no fix listed

Open the chart page →

45,392
jasperjasperVerified publisher1.0.2031 of 2See more

jasper jasper 1.0.203

1 of the 2 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
ghcr.io/cjmalloy/jasper:v1.3.282726a947bb65b
wget@1.21.3-1+deb12u1
no fix listed

Open the chart page →

9,148
homebridgejespernohrVerified publisher0.2.01 of 1See more

homebridge jespernohr 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
homebridge/homebridge:latest77c685a40911
wget@1.21.4-1ubuntu4.5
no fix listed

Open the chart page →

2,203
discord-experiencebotjfwenischVerified publisher0.7.41 of 1See more

discord-experiencebot jfwenisch 0.7.4

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/discord-experiencebot:latestb52ff07f9f0c
wget@1.19.4-1ubuntu2.2
no fix listed

Open the chart page →

7,842
steamcmd-managerjfwenischVerified publisher0.4.51 of 1See more

steamcmd-manager jfwenisch 0.4.5

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
wget@1.21.4-1ubuntu4.1
no fix listed

Open the chart page →

6,648
webtoolsjfwenischVerified publisher0.1.41 of 1See more

webtools jfwenisch 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
wget@1.21.4-1ubuntu4.1
no fix listed

Open the chart page →

6,629
image-storage-servicejtektVerified publisher0.4.31 of 4See more

image-storage-service jtekt 0.4.3

1 of the 4 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
wget@1.21.3-1+b2
no fix listed

Open the chart page →

22,665
shinsei-managerjtektVerified publisher0.2.04 of 8See more

shinsei-manager jtekt 0.2.0

4 of the 8 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
moreillon/api-proxy:latestd7d4a5463525
wget@1.21.3-1+deb12u1
no fix listed
moreillon/group-manager:latest3caa8f710ee0
wget@1.21.3-1+deb12u1
no fix listed
moreillon/user-manager:v5.0.2e1c9bfab5c16
wget@1.21.3-1+b2
no fix listed
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
wget@1.21.3-1+b2
no fix listed

Open the chart page →

59,560
time-series-storagejtektVerified publisher0.1.101 of 2See more

time-series-storage jtekt 0.1.10

1 of the 2 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
wget@1.21.3-1+b2
no fix listed

Open the chart page →

16,626
bitcoin-stackk8s-chartsVerified publisher1.0.11 of 1See more

bitcoin-stack k8s-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
blockstream/bitcoind:27.29472492530e3
wget@1.21.3-1+b2
no fix listed

Open the chart page →

2,425
palworld-serverk8s-chartsVerified publisher1.2.11 of 1See more

palworld-server k8s-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
thijsvanloef/palworld-server-docker:v2.5.0b4ac9ee22483
wget@1.25.0-2
no fix listed

Open the chart page →

3,433
valheim-serverk8s-chartsVerified publisher1.3.01 of 1See more

valheim-server k8s-charts 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
mbround18/valheim:3.1.070bd4da591cd
wget@1.21.2-2ubuntu1.1
no fix listed

Open the chart page →

6,136
k8s-dev-podk8s-dev-pod0.3.11 of 1See more

k8s-dev-pod k8s-dev-pod 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
wget@1.21.4-1ubuntu4.1
no fix listed

Open the chart page →

8,879
kadeck-teamskadeck1.1.211 of 1See more

kadeck-teams kadeck 1.1.21

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
xeotek/kadeck:6.3.439a3b37a17c5
wget@1.21.2-2ubuntu1.1
no fix listed

Open the chart page →

3,615
kadeck-webkadeck0.6.01 of 1See more

kadeck-web kadeck 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
xeotek/kadeck:4.2.94c6b04d9ce55
wget@1.20.3-1ubuntu2
no fix listed

Open the chart page →

7,292
music-assistantkarljorgensen0.1.31 of 1See more

music-assistant karljorgensen 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
wget@1.21.3-1+deb12u1
no fix listed

Open the chart page →

6,836
kc-chartkc-chart1.0.01 of 3See more

kc-chart kc-chart 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
jhoncytech/bookworm-apache-wordpress:latest18c3ca1f411e
wget@1.21.3-1+b2
no fix listed

Open the chart page →

7,599
xwikikeyporttech0.2.01 of 2See more

xwiki keyporttech 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
library/xwiki:lts-postgres-tomcat56490ac14a31
wget@1.21.4-1ubuntu4.5
no fix listed

Open the chart page →

1,634
phppgadminkfirfer0.1.121 of 1See more

phppgadmin kfirfer 0.1.12

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
kfirfer/phppgadmin:7.13.0-22efb4a5d74a3
wget@1.20.3-1ubuntu2
no fix listed

Open the chart page →

10,303
proxysqlklicktippVerified publisher1.3.01 of 1See more

proxysql klicktipp 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
proxysql/proxysql:3.0.8947a7abad45b
wget@1.25.0-2
no fix listed

Open the chart page →

2,490
kubeflowkromanow94-kubeflow0.5.13 of 30See more

kubeflow kromanow94-kubeflow 0.5.1

3 of the 30 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
library/python:3.7eedf63967cdb
wget@1.21.3-1+b2
no fix listed
gcr.io/ml-pipeline/api-server:2.3.039661bd823e8
wget@1.21.3-1+b2
no fix listed
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
wget@1.21.3-1+b2
no fix listed

Open the chart page →

68,994
adventureworkskronkltdVerified publisher0.1.01 of 1See more

adventureworks kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
chriseaton/adventureworks:latest54c3384ce701
wget@1.21.2-2ubuntu1.1
no fix listed

Open the chart page →

4,462
mindsdbkronkltdVerified publisher0.1.01 of 1See more

mindsdb kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
mindsdb/mindsdb:latest163011c09299
wget@1.25.0-2
no fix listed

Open the chart page →

9,652
aapm-servicekron-pam-aapm-helmcharts1.2.51 of 1See more

aapm-service kron-pam-aapm-helmcharts 1.2.5

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
krontechnology/aapm-service:1.1.39dd602db8baa
wget@1.21.2-2ubuntu1.1
no fix listed

Open the chart page →

2,645
kron-aapm-agentkron-pam-aapm-helmcharts1.2.51 of 1See more

kron-aapm-agent kron-pam-aapm-helmcharts 1.2.5

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
krontechnology/aapm-agent:1.8.41cc7d5be6529
wget@1.21.2-2ubuntu1.1
no fix listed

Open the chart page →

2,746
kube-bootkube-bootVerified publisher1.2.21 of 1See more

kube-boot kube-boot 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
library/eclipse-temurin:2185f00967bcc6
wget@1.25.0-2ubuntu4.4
no fix listed

Open the chart page →

1,229
deepflowkubesphere-stable6.2.6061 of 8See more

deepflow kubesphere-stable 6.2.606

1 of the 8 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
deepflowce/clickhouse-server:22.8.6.71bc1882f75c18
wget@1.20.3-1ubuntu2
no fix listed

Open the chart page →

18,394
clickhousekubesphere-testVerified publisher0.1.11 of 2See more

clickhouse kubesphere-test 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
radondb/clickhouse-server:v21.1.3.32-stable4732df471073
wget@1.19.4-1ubuntu2.2
no fix listed

Open the chart page →

6,701
fstyr-ddp-keycloak-application-platform-configkvalitetsitVerified publisher0.1.131 of 1See more

fstyr-ddp-keycloak-application-platform-config kvalitetsit 0.1.13

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
adorsys/keycloak-config-cli:6.3.0-26.1.085be7a45a94c
wget@1.21.4-1ubuntu4.1
no fix listed

Open the chart page →

3,143
keycloak-application-platform-configkvalitetsitVerified publisher0.0.291 of 1See more

keycloak-application-platform-config kvalitetsit 0.0.29

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
adorsys/keycloak-config-cli:6.1.6-25.0.1eb49a2dcbbb8
wget@1.21.4-1ubuntu4.1
no fix listed

Open the chart page →

3,373
ladeitladeit0.4.01 of 2See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
kubeoperator/webkubectl:v2.4.0be8f0d624640
wget@1.19.4-1ubuntu2.2
no fix listed

Open the chart page →

26,371
homebridgelbenicio-communityVerified publisher0.1.151 of 1See more

homebridge lbenicio-community 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
homebridge/homebridge:latest77c685a40911
wget@1.21.4-1ubuntu4.5
no fix listed

Open the chart page →

2,203
ingresslivekit-server1.2.21 of 1See more

ingress livekit-server 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
livekit/ingress:v1.2.21ab01641b366
wget@1.21.2-2ubuntu1
no fix listed

Open the chart page →

10,773
nightingalelogic3579Verified publisher0.3.11 of 6See more

nightingale logic3579 0.3.1

1 of the 6 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
flashcatcloud/categraf:latest42e6ab16472e
wget@1.21.4-1ubuntu4.1
no fix listed

Open the chart page →

9,021
rocketmq-exporterlogic3579Verified publisher0.0.21 of 1See more

rocketmq-exporter logic3579 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
apache/rocketmq-exporter:0.0.2c8fb51195444
wget@1.21.2-2ubuntu1
no fix listed

Open the chart page →

6,674
login-test-backendlogin-test-backend0.1.01 of 2See more

login-test-backend login-test-backend 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
aboogie/login_test_backend:new9c41a4483ac8
wget@1.21.3-1+b2
no fix listed

Open the chart page →

5,970
clickhouselohmag0.2.01 of 1See more

clickhouse lohmag 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
yandex/clickhouse-server:19.17ab1738a64b70
wget@1.19.4-1ubuntu2.2
no fix listed

Open the chart page →

5,910
loxilbloxilbVerified publisher0.1.02 of 2See more

loxilb loxilb 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
ghcr.io/loxilb-io/kube-loxilb:latest6f65e53e252d
wget@1.21.2-2ubuntu1.4
no fix listed
ghcr.io/loxilb-io/loxilb:latestc7ede1bab641
wget@1.21.2-2ubuntu1.5
no fix listed

Open the chart page →

4,502
m9sweeperm9sweeperVerified publisher1.6.01 of 6See more

m9sweeper m9sweeper 1.6.0

1 of the 6 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
ghcr.io/m9sweeper/trawler:1.6.0df917c5a7e54
wget@1.21.3-1+b2
no fix listed

Open the chart page →

9,786
magistralamagistrala-devopsVerified publisher0.16.21 of 42See more

magistrala magistrala-devops 0.16.2

1 of the 42 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
wget@1.21.2-2ubuntu1
no fix listed

Open the chart page →

24,488
circleci-runnermatic-insurance0.1.11 of 1See more

circleci-runner matic-insurance 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
circleci/runner:launch-agent9bdc62f02162
wget@1.20.3-1ubuntu2.1
no fix listed

Open the chart page →

4,150
tinymediamanagermedia-servarrVerified publisher1.6.21 of 2See more

tinymediamanager media-servarr 1.6.2

1 of the 2 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
tinymediamanager/tinymediamanager:5.3.22b34dc85099e
wget@1.25.0-2
no fix listed

Open the chart page →

7,760
mini-blogmini-blog-helm0.1.01 of 3See more

mini-blog mini-blog-helm 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
beyzkaya/blog-backend:v1.0.112a6a3d1c5f9
wget@1.21.3-1+deb12u1
no fix listed

Open the chart page →

12,637
MINTmint8.0.21 of 15See more

MINT mint 8.0.2

1 of the 15 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
wget@1.21.3-1+deb12u1
no fix listed

Open the chart page →

42,983

Container images carrying it

560 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
wget@1.21.3-1+b2
no fix listed
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
wget@1.21.3-1+b2
no fix listed
1
quay.io/argoprojlabs/gitops-promoter:v0.38.19c8a510dc25e
wget@1.25.0-2
no fix listed
1
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
wget@1.21.2-2ubuntu1
no fix listed
1
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
wget@1.25.0-2
no fix listed
1
quay.io/go-skynet/local-ai:latestd78cd113b2bc
wget@1.21.4-1ubuntu4.4
no fix listed
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
wget@1.21.3-1+b2
no fix listed
1
registry.gitlab.com/dyff/workflows-aggregator:0.16.9b7984253b128
wget@1.25.0-2ubuntu4.4
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
wget@1.21.3-1+deb12u1
no fix listed
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
wget@1.21.3-1+deb12u1
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.